This topic has been locked
Kerry Nov 16, 2022 @ 1:32pm
2
Remove all Discord CDN links
The chat program Discord is a known dumping ground for malware and malicious bots, and is widely used for command and control of serious malware including credential stealers, ransomware, and other things. Some malware can even use Discord to crash other players' games.

Sophos, an anti-malware publisher and research group, reports that the greatest amount of malware they've found on the Discord Content Distribution Network is, quote: "credential and personal information theft, a wide variety of stealer malware as well as more versatile RATs."

This means software that steals bank account info and Steam account info.

So by allowing games that link with Discord to run on Steam, ValveCorp is inadvertently putting their users and all the games on this platform at serious risk of catastrophic loss.

I believe that these games should be sanctioned or heavily restricted in their capability to link with Discord, and all links that lead to a Discord server should be considered a direct link to malware.

Source: https://news.sophos.com/en-us/2021/07/22/malware-increasingly-targets-discord-for-abuse/

EDIT: I will not allow this thread to be derailed by any method. Attempts to bring up previous threads are obvious attempts to derail a thread and will be treated as such.

Each creator who makes a post that attempts to derail this thread will result in one singular chain of action:

Mute, block, report. You're not worthy of my time if you keep trying to derail the thread and troll me. You're not going to get a rise out of me.

EDIT: I'm sick and tired of some people (not naming names) being so stuck-up and closed-minded that they cannot admit that other people have different experiences.

The technically-impossible happens all the time. Just because YOU haven't seen it happen, doesn't mean weird crap doesn't happen!
Last edited by Kerry; Nov 17, 2022 @ 4:44pm
< >
Showing 481-495 of 599 comments
Kerry Nov 17, 2022 @ 10:48pm 
Originally posted by KittenGrindr:
Originally posted by Kerry Freeman:

Discord itself, no. The CDN is the problem.


So the goalposts have moved now.

Soon we'll get to the truth of "Discord isn't the problem, it's users who don't practice basic internet safety "

If Discord were more proactive in policing its' CDN, there wouldn't BE an issue with users in the first place!

The users having poor internet safety are a symptom, not the cause! Proper internet safety is like wearing PPE in a COVID ward. It's prevention, not cure.

Malware is a pandemic of a different nature, but roughly the same treatment. You have to trace the pandemic to the source and treat it there. And the source is the Discord CDN.
Last edited by Kerry; Nov 17, 2022 @ 10:52pm
Boblin the Goblin Nov 17, 2022 @ 10:51pm 
Originally posted by Kerry Freeman:
Originally posted by KittenGrindr:


So the goalposts have moved now.

Soon we'll get to the truth of "Discord isn't the problem, it's users who don't practice basic internet safety "

If Discord were more proactive in policing its' CDN, there wouldn't BE an issue in the first place!

The users having poor internet safety are a symptom, not the cause.


That literally makes no sense. Poor internet safety causes viruses to spread and infect.

It isn't a symptom of the viruses spreading.

That's like saying an employee who opens a phishing email is a symptom of a network infection, not the cause.
Kerry Nov 17, 2022 @ 10:52pm 
Originally posted by KittenGrindr:
Originally posted by Kerry Freeman:

If Discord were more proactive in policing its' CDN, there wouldn't BE an issue in the first place!

The users having poor internet safety are a symptom, not the cause.


That literally makes no sense. Poor internet safety causes viruses to spread and infect.

It isn't a symptom of the viruses spreading.

That's like saying an employee who opens a phishing email is a symptom of a network infection, not the cause.

Yes, and I later edited my post to reflect what I was trying to say better. My apologies for being confusing.

Proper internet safety is like wearing Personal Protective Equipment in a COVID ward. It's prevention, not cure.

You can prevent catching most malware by practicing proper internet safety, but that won't stop every piece of it from getting through. To truly stop it, you've got to treat the source.

Malware is a pandemic of a different nature, but roughly the same treatment. To cure a pandemic, you have to trace the pandemic to the source and treat it there. And the source of this pandemic is the Discord CDN.
Last edited by Kerry; Nov 17, 2022 @ 10:56pm
Boblin the Goblin Nov 17, 2022 @ 10:56pm 
Originally posted by Kerry Freeman:
Originally posted by KittenGrindr:


That literally makes no sense. Poor internet safety causes viruses to spread and infect.

It isn't a symptom of the viruses spreading.

That's like saying an employee who opens a phishing email is a symptom of a network infection, not the cause.

Yes, and I later edited my post to reflect what I was trying to say better. My apologies for being confusing.


Yeah, no.

Discord isn't the 'source' anymore than Google(who host a lot of these services) is the 'source'.

Discord is a tool, just like email was(and still is according to your article). It isn't a 'source'.

To say that Discord is the source of a malware 'pandemic' is ignorant at best and naive at worst.
Last edited by Boblin the Goblin; Nov 17, 2022 @ 10:57pm
Kerry Nov 17, 2022 @ 10:56pm 
Originally posted by KittenGrindr:
Originally posted by Kerry Freeman:

Yes, and I later edited my post to reflect what I was trying to say better. My apologies for being confusing.


Yeah, no.

Discord isn't the 'source' anymore than Google(who host a lot of these services) is the 'source'.

Discord is a tool, just like email was(and still is according to your article). It isn't a 'source'.

According to my articles, the content distribution network is the source. Like a pool of water infected with malaria which mosquitoes then spread.

How do you treat malaria? By getting rid of the mosquitoes.
Last edited by Kerry; Nov 17, 2022 @ 10:57pm
Boblin the Goblin Nov 17, 2022 @ 10:58pm 
Originally posted by Kerry Freeman:
Originally posted by KittenGrindr:


Yeah, no.

Discord isn't the 'source' anymore than Google(who host a lot of these services) is the 'source'.

Discord is a tool, just like email was(and still is according to your article). It isn't a 'source'.

According to my articles, the content distribution network is the source.


No, their CDN is a tool used by malicious actors.

That same article even says those same actors use and have more success through email.
Kerry Nov 17, 2022 @ 11:17pm 
Originally posted by KittenGrindr:
Originally posted by Kerry Freeman:

According to my articles, the content distribution network is the source.


No, their CDN is a tool used by malicious actors.

That same article even says those same actors use and have more success through email.

That article said those emails use malware stored in the Discord CDN. The emails and links are a transmission vector. Treat the CDN, eliminate the malware inside it, and you eliminate those evil emails.

Removing/blocking access to the CDN would do this. It's a solution.

The Discord CDN is like a standing-water, malaria-infected pool from which mosquitoes receive the disease.
The emails and links are a transmission vector, like mosquitoes they spread the infection from the source pool.
The users that receive the infection are victims. They did not ask to get bitten.

The solution is to cleanse or drain the pool, or block off access to get rid of the infection. The pool is the Discord CDN. Therefore the logical solution is to block off access to the CDN.
Last edited by Kerry; Nov 17, 2022 @ 11:24pm
Tito Shivan Nov 17, 2022 @ 11:23pm 
I woke up to +200 comments in this thread, how could this.
You actually made me read the article that somehow has sprawled all running around in circles.
So:
The article found 17.000 malicious URLs within Discord CDNs... That sure seems a lot.
Until one goes to look how many people uses Discord.
There were 300 million registered users in 2019. 150 million monthly active users in 2021.

That means there's a malicious link for every 0.0001 Discord users.
Hard to call that a pandemic and to request someone to fully block a service for.
Kerry Nov 17, 2022 @ 11:25pm 
Originally posted by Tito Shivan:
I woke up to +200 comments in this thread, how could this.
You actually made me read the article that somehow has sprawled all running around in circles.
So:
The article found 17.000 malicious URLs within Discord CDNs... That sure seems a lot.
Until one goes to look how many people uses Discord.
There were 300 million registered users in 2019. 150 million monthly active users in 2021.

That means there's a malicious link for every 0.0001 Discord users.
Hard to call that a pandemic and to request someone to fully block a service for.

Those links are merely transmission vectors, vectors that can be used multiple times.

For comparison, how many humans does the average mosquito bite? Mosquitoes are also transmission vectors.
Last edited by Kerry; Nov 17, 2022 @ 11:26pm
76561199003456567 Nov 18, 2022 @ 1:01am 
kkkkkkkhkhkhkhhhhhh:steamthumbsup:
Frostbringer Nov 18, 2022 @ 4:26am 
Originally posted by Kerry Freeman:
Originally posted by Tito Shivan:
I woke up to +200 comments in this thread, how could this.
You actually made me read the article that somehow has sprawled all running around in circles.
So:
The article found 17.000 malicious URLs within Discord CDNs... That sure seems a lot.
Until one goes to look how many people uses Discord.
There were 300 million registered users in 2019. 150 million monthly active users in 2021.

That means there's a malicious link for every 0.0001 Discord users.
Hard to call that a pandemic and to request someone to fully block a service for.

Those links are merely transmission vectors, vectors that can be used multiple times.

For comparison, how many humans does the average mosquito bite? Mosquitoes are also transmission vectors.

On average, a mosquito bites one person before it’s swatted. 😁

If you wish to discussion transmission vectors why are you discounting things greater than discord , such as phishing emails or greater social media sites such as FB, Twitter, instagram, WhatsApp, etc..
Boblin the Goblin Nov 18, 2022 @ 4:35am 
Originally posted by Frostbringer:
Originally posted by Kerry Freeman:

Those links are merely transmission vectors, vectors that can be used multiple times.

For comparison, how many humans does the average mosquito bite? Mosquitoes are also transmission vectors.

On average, a mosquito bites one person before it’s swatted. 😁

If you wish to discussion transmission vectors why are you discounting things greater than discord , such as phishing emails or greater social media sites such as FB, Twitter, instagram, WhatsApp, etc..


Because it's inconvenient to this narrative.
Tito Shivan Nov 18, 2022 @ 5:12am 
Originally posted by Kerry Freeman:
Those links are merely transmission vectors, vectors that can be used multiple times.

For comparison, how many humans does the average mosquito bite? Mosquitoes are also transmission vectors.
We haven't fully erradicated mosquitoes though. Despite being a transmission vector for many illnesses.
Start_Running Nov 18, 2022 @ 6:33am 
So OP. You got spooked by an articale written byu a company that just so happens to sell the solution the the thing they're panicking you about....

Look Discord is actually pretty safe, It's no more or less dangerous than the internet as a whole.

Add to that the fact that OFFICIAL servers for devs, studios, publishers, etc are by nature safer than others due to legal responsibility and there's no reason for steam to do anything about it. I mean if you get a virus or malware from a devs endorsed or unofficial server.. then guess what... you can sue that dev/pub for damages...and in most cases win.

The caveat here however is rthe longstanding truth that the problem here is usually the component seated in the chair.

The oldest bit of internet secyurity advice is not to download strange files from dubious sources.
And to this day people still gotta learn that the hardway.

The same people falling prey to malware on discord are the same people whould have been downloading "HallieberryNudeScreensaver.exe" from some shady geocities website back in the day. WIth pretty much the same results.

Simple truth. When you use discord... and you download a file. Pass it through your av program or Virustotal before you run it.

Company that sells fix for X ppublishes article about the dangers of x.
COmpany that sells Y publishes stdy touting the many, many benefits of Y

Neither case has to involve any falsification of the data, but they can do a lot to embelish the risks/benefits.

Last edited by Start_Running; Nov 18, 2022 @ 6:35am
< >
Showing 481-495 of 599 comments
Per page: 1530 50

Date Posted: Nov 16, 2022 @ 1:32pm
Posts: 599